Skip to content
Network USA

HHS OCR report ยท 2010

NewYork-Presbyterian Hospital and Columbia University Medical Center data breach

NewYork-Presbyterian Hospital and Columbia University Medical Center, a healthcare provider in New York, reported a breach affecting 6,800 individuals to HHS OCR on Sep 24, 2010.

OCR report facts

Covered entity
NewYork-Presbyterian Hospital and Columbia University Medical Center
Entity type
Healthcare Provider
Individuals affected
6,800
Submission date
Sep 24, 2010
Type of breach
Theft
Location of breached information
Network Server
Business associate present
No
Status
Archive (closed)

OCR description

Data breach results in $4.8 million HIPAA settlements \Two health care organizations have agreed to settle charges that they potentially violated the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules by failing to secure thousands of patients' electronic protected health information (ePHI) held on their network. The monetary payments of $4,800,000 include the largest HIPAA settlement to date. \The U.S. Department of Health and Human Services (HHS) ...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the NewYork-Presbyterian Hospital and Columbia University Medical Center data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from NewYork-Presbyterian Hospital and Columbia University Medical Center legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or NewYork-Presbyterian Hospital and Columbia University Medical Center.